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Me Good afternoon ladies and gentlemen. I L am a here today to share some of our current Es 


n he 
Eye 
104, 


ae insights on cyber security threats and trends as well as to speak to how these hostile 
activities can affect the businesses you represent. 


| extraction to agriculture. We have seen now that any business with a certain level of 


r: intellectual property, trade; and commerce. 


‘©. WU) These ‘threats are alto global. are) do not end et the shores of Halifax or Vancouver- — 


` agencies have limited reach, 


. à It used to be thought that only certain sectors, such as high tech, aerospace, and 
military-based industries were at risk. That simply is not true today. Cyber-based threats 
are ubiquitous and can affect Canadian industry ranging from high tech to resource i 


ertise can and will be exploitéd by actors unconcerned with the laws governing -: 


se 


-thëy will follew your conipanies and their offices stiraad, where eg iw end security ~ 
Sy, Up, = hin 


i (U) Today, Twill whe an effort to be as transparent as possible on the threats we fats aed 
os «the. tacties of our adversaries and competitors. f would ask, however, that you treat this - 
r. information as sensitive and respect the SECRET-level classification of today’s briefing. 


Ba Ladies and gentlemen, what we are witnessing today i is the creation of a new threat ^ 


‘environment. Cyber power has become a game-chaniger in pasg global projection of HE 
power | in the 21st century. í Gan 


evolution of this threat environment 
Indeed, 
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a ® Chen with our corporate partners to face this cyber threat is vital for success. 


ptt th ponjorig of f Canada’ s critical infrastructure and intellectual property resides 
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EE L cy Su Before discussing these threats, { would like to acknowledge that Canada’s cyber 
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Security regime is a team effort and includes the Communications Security Establishment, 


| Public Safety Camda, the RCMP, and CSIS, alll of whom maintain dedicated units to 


countering cyber threats, Both Public Safety’s Canadian Cyber Incident Response Centre. 


` and -the Communication Security Establishment’s Cyber Threat Evaluation Centre are ` = 
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vital to improving the security posture for both government tt private sector networks. 
Through the leveraging of each orgauization’s unique mandates end expertise, the 


© Government works to ensure that Canada’s cyber EE and mi | Government, 
business, and its citizens. D D way in, AC Cr 
© CSIS’ role in Canada’s cyber secnrity regime, in accordanée si i a fo. > “OR 


-:: determine whether the cyber activities of individuals, organizations ot groups égales | | 
: threat ‘to the security of Canada. With Service advice, the Government makes better, 2 hôte ‘ 
ae informed decisions related to. policy, response, investment and governance. The Service's’, 


‘and private sector across Canada. As well, the addition of our new threat reduction 
mandate through the recent passing of C-51 will certainly provide further opportunities to i 
counter this threat. Ultimately, the Service’s cyber programs will contribute to Canada’s - 
economic well-being and prosperity by making Canada’s cyber space safer. re 


Ü And keeping the cyber space safe and secure for Canadians and Canadian business is 
ultimate goal While no clear or reliable estimates exist, some have Placed the global : 


y : about ha sponomis sp and continued prosperity of Canada and our way of life. 
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.. © .(S) During this past year, 


“se ® On thc technical side, internet connected home devices, cloud platforms and the. i 
eommodiiization af internet-enabled technology continues to evolve, improve, aad expand. 
- The heightened commercial e of security and privacy due to consumer demand have. 


{ D Th oe = led to recent cominitments from ‘Apple and Google to improve device-based encryption and — 
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+ ` (S) All actorg, batir state aad non-state, are becoming increasingly aware of the asyanmetric 
eo . ‘opportunities presented by offensive cyber activities when used in conjunction with other. 
| programs, although clear-infernationa] norms have yet to emerge. 
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T cyber program is providing unique dividends to the Government and partners ia the publie a) 


coats related to cyber security between $375 to $575 B USD annually, and poteniially ‘S12 B K 
2 CDN annually i in Canada. Clearly, exber security isn’t just about national ‘security; ips. Co : © 
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l ape shared with: little thought or care, Just as private companies use wach data to build fi 
LE k for advertisers to market products directly to consumers, cyber actors too can use such 
information and techniques to their advantage and well beyond the arguably benign uses of : 
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A 4 f en would like to now turn fo late basa actors, a | 
ee ėst SBut itive sve begin, we should also be ir the cyber-based collection tit of | 
; ‘our adversaries ark apt de HA to those of Canada ahd our ‘closest allies. ' | 
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. the Caml its commantty does not Client FES in support | 
of the specific interests of private businesses : ar dust. D | 
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. (U) Canada’s national security community conducts its activities within clear legal | | 
4 Æ 1 parameters and often through measures warranted by the Courts. Qur ky adversaries, as 
Ba you may be aware, do, however, engage ‘in espionage in support of their — ind a | 
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T pi Bon addition to pure gta han operái avions buman source opera ms tion 
~” ‘combined with cyber techniques for great effect. L74; & 
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As such, charges and further investiga do 


er Des pi ER 470 AN, 
4 cabs is that lesses arc wot limited to what is actually compromised or stolen but include & 

“residual costs of vepaiting, restoring, and enhancing entire compromised IF systems to ? 

P © > mitigate risks of future attacks. These losses may be minor compared to the significant i 


opportunity costs associated wiéh/thisthefé . 
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The danger in using offensive cyber operations is that rules of escalstion are À 
not well established. As such, offensive cyber-attacks resulting in a loss of life could be 
construed as an get of war-and likely to tieit a strong counter-attack. | ARN 


+. (U) Non-aligned groups also constitute à threat to bed Yvvecedidet and corporations. 
: Hacktivism groups, such as Anonymous bave evolved to become more of a socio-political 
collective than a traditionally orane entity which is managed by a top-down hierarchy. 
' ‘Targets are chosen in order to promote the colléctive’s sociat and political agendas. To 
date, Anonymous” cyber campaigns have focussed on perceived internet censorship, . 
alleged corrupt corporations and governments, alleged government infringement of human 
rights and freedoms, and perceived police brutality. . 


w œ (U)Of particular concern to the private sector, is the interest from such groups in 
damaging various governments’ and corporations’ public relations images in order to raise 
public awareness of perceived and alleged injustices. i 
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s © In addition, we have also seen growing interest fress Co “ON S ESS 5 to. 
engage primarily for the purpose of ESS To 7 Ne Oy 


& While some actors associated with > may have the Or 


; pon yet to see this, it is certainly a growing comcern as technology is pervasive and 
om | expert becomes relatively easy to acquire. 


ə > = O Industries that could be targeted by offensive cyber operations are likely to indade | 


critical infrastruélire with particular focus on areas where public safety = be 1 Mees 
"compromise, such as transportation infrastructure. That sald, Di à à se 


9): Such à i development would be ths avai actors do not respond to: me. 
Er 7 E npea o US Pet la The ` 
a | is actively monitoring for any such bb BS: A 
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eu) Turning: now to cyber criminality, according to the RCMP, igus a are a ER 
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“+ LT a : demonstrating strong cyber capabilities. At the transnational level there are organized | 


ee crime n setworks that have capital estimated in the billions of dollars. Their financial” 
: 7 position creates the opportunity for them to access the most advanced cyber capabilities - 
, normally associated only with nation states. Individuals participating in these networks. < 
e have been known to hack into government systems to steal information, infect thousands of as 
F Bes gemputers 6 to steal data and/or launch further cyber-attacks, sell illicit drugs and guns E 


WO venline criminal marketplaces, among other crimes. 


S Ok >: LYS on ate © à > 


i TS NE (Today; fhe expansion o of oë criminal marketplaces, including a growing servic- 


710 Vis. based cybercrime indystry,  Sérgmerged worldwide, providing the tools and technical 
DE La; Des Fabertise required for even amateur criminals to profit from cybercrimes like the dt, > 
Lo; seperate re use of compromised personal, corporate, and/or government 
data 4 M Wl Sy, 
© > es (O) The RCMP, aloo, ith is partners, i is also working to respond to the resurgence of - 
. Denial of Service (DoS) attabks ofall bors, Individuals or groups of criminal are rate 
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corporations of all sizes in an attempt to extort money. Specifiealty, an entity identifying 

itself as DD4BC launched such a campaign that continues today. its approach ís to-attack a 
target with a DoS, and subsequently sénd corréspandeare - -in the form oF ap-emnil, twitter 
messages - requesting the payment of a fee or the attad will ineregee. The amount” A Cr 


Fz | 


demanded i is. usually i in the range of 25 to 50 bitcoins - - oF 86675 fo PIAS USD. This / AC» 


$ campaign has targeted several companies in Canada along with the US, UK. Australia, 


7 France and several others. Given the scope of the attacks, the RCMP has partagred vith l4 


: “key countries i in an attempt to take action against DD4BC. 


p: W. Formerly known as the Man-in-the-email scam, the RCMP is secing a resurfacing of 


what i is now referred to as Business Email Compromise fraud. This type of fraud targets 
wire transfer payments made to foreign banks, Fraudsters are using everything from 
simple social engineering ploys to more sophisticated ‘email system compromises to 


ss convinee an employee to execute a transfer to a fraudulently created bank account. 


N v Frauds of all types are being reported to the Canadian Anti-Fraud Centre. In 2014, it 


4 received over 14,000 complaints of cyber-related fraud accounting for more than s45Mi in 


+: x reported losses, As you can imagine the reality is these numbers are likely underreported 
: and the true extent of victimization is much greater. 


s 


4 w) As the federal kad for cybercriminal activities, the RCMP focuses on incidents that 


g have a national impact. For examphe i in | December 2014, the RCMP charged the individual 


responsible for the well-knewa “Heurybleed” software vulnerability, which involved a 


malicious breach of taxpayer data at the Catiads Revenne Agency (CRA). Primary charges 
, involved one count of unlawfully obtaining s computer service ing one count of unlawfully 


intercepting a computer system function. The suspect also faced 14 additional charges 
involving alleged hacks against the CRA, the University of Western Ontario, the London 
District Catholic School Board, and an offshore email service, among other victims. 


` (U) The international nature of cyberspace, as you can imagine, presents challenges to law 


enforcement to obtain, exchange, and analyze vast amounts of digital data and evidence to 
successfully prosecute criminal cases with a cyber-nexus. With this in mind, the RCMP is 
pleased to be a part of the Joint Operational Resilience Management pilot project, which 
has brought together a multi-disciplinary team of financial sector representatives and the 


| (oper, ‘Such endeavours will benefit Canadians by providing them secure environments 


A dr qut their online activities. 


NE TO SE AU) Gives beth the PSS 1 igety threats and criminal activities just described, what. 
DES à Gaiyan as business’ teaders ‘do fo aye your employees and companies? 
“ae 


ys “A } A id E # + 
wy yes on fyo f facets e: this Oem. today. The first in relation to travel abroad ` 


for busitiess and the perohd tn relation to nae your ‘offshore locations, often in fess ‘ 


x than à hospitable cereal, 
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- (S) We certainly recognize that business travel in a compare sighat economy isa 


| 
necessity. That said, there are some vey, practical steps you ‘eat take to ensure itia done as 
safely and securely as possible. Ep, "Eo, S v4 S Es Vos 7 4 | 
EN: Ruger ag | 
~e © The significance of the knowledge you have IIA rare i granted. ait iy beady f Vir) at 
OF oy NS pe OB yp ACP Op 
to think some of it is benign or even public. SUp £ IGA LA big | d 
s While perbi pha reliant) | 
SSTL ' 
Medion for your junior employees, it is important for all employees to maintal their, © © ERa gn: 
“ ai ù y 
k situationsl awareness in this Ed He 4 We 
47, (en As 
ee 6 it is important to realize that even before yon leave to travel abroad, Bm s 
FE Te. s k ae 


The best rule of thumb is to assume you are being targeted and he s + F 
your behavior accordingly. On the cyber front, recognizing that conducting business on a PL 


' open platforms presents the greatest risk, travel preparation can involve some every . 


SR 


lo, l'ENee D De. 
: 48) Second, | "SUR 2 à G, € 7 


“common-sense i L gS 

s iret, “Cogs OF SED A 
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op 7 SEE : Shs. ee. | 
| motivation, yxy eich Hpald lead shader moro ot sensitive dat. | n o 


ro i que is aware that foreign threat actors have a vane of. à 
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i k our a investigations. 
4 _ V you are all aware, implementing | best practices in relation iT scoûéity | js: 
i i always 2 vised. Seventy to eighty per cent of the cyber incidents that CS bsp ) 
e known vulnerabilities for which there are known solutions. I would stress: Don’t fie tS 


| easy for competitors to acquire information easily. By imposing costs, companies can y, ry N 


change the cost/benefit calculus and help forestall future attacks. 


e (UI know there was also some interest to discuss challenges associated with operaiiog - 
- offshore, in particular the potential for increased risks to cybersecurity. In: general, any ~ 
"operation or activity that lessens your direct control over information or- property isat 
“greater risk of theft and exploitation, especially when contracting out to third parties 


ai e the profit motive ensures a certain loyalty from 


There is simply no way to avoid this issue in countries where these practices are z 
araka the authorities 
‘encouraged by ea PRIYA Ene 


jis sditios, operatig bn foreigs juridictions means you will be playing an “pene: E 


-@ = tobe managed and assessed continually, particularly through a careful examination, on s 
RS à k ame information is shared to offices abroad. en includes the private information of. ee | : 


À “monetary må a further means to conduct espionage. 


e _Taqsport any such incidents like I have described, al} private organizations ean co nt 

«Est Cyber Incident Response Centre (CCIRC) at Public Safety. The CCIRC 

ae, ey) ee “provide you-with regular. noes on compromises and help you protect and mitigate 

Ep, fo Ne Wa „against these threat These services are provided to all Canadian Ao free of E Şi 
PA E iS ALES share gad with full ny, 


“Ys ‘on Got thoterighs, 1 cannot stress ésough how invaluable mutual cooperation : 
` i remains. ‘heey tting ciber threat scape poses many challenges to the national security k 
Ə A “community, romi eels 0g and some with the ee we serve. 
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game.” ‘State authorities wil mpini intimate knowledge of the rules and. the local: players a > i . 
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° (S) Turning the discussion to the challenges facing Cangjja’s security courmunity, w we must ; 
5 4 "speak to the public environment we new operate i in, particularly post-Suoveden. eh: the 
& Snowden revelations were certainly one of the most signifieant leaks of classified | Fy kg i 
. information in the history of the Five Eyes, DE ie OE Ex. “Ac: Mol 
| | Le Ms U De, : ACO 
| 
| 


e O Thowgh perhaps: felt most acutely in the United States, Canadian genes te na by 
7 ck from Mr. Snowden's actions, however unfairly. One could see thts top ‘ PREN AA 


fA 
Aik 


: remat debate over C-51, the Anti-Terrorism Act. During that debate, the activities of. ih vA, in VE 


+ Amerienn agencies became caught up in the public narrative in Canada, despite the: fact. _ hy x i 


‘that the mandates and authorities of our respective agencies differ immensely. References 4 
oto blanket surveillance and unauthorized meta-data collection were made, despite the fact a 
© that CSIS and our community partners do not engage in such activities in Canada. 


v The. paradox the intelligence world has faced is that we must maintain the public’ a g | à 
3 a ~ -` trust and confi dence, while keeping our information secret. It is an unenviable task. Our É 
d “review bodies have played an important role in assuring the Canadian public of the 
Fate ‘‘aphropriatscis of our activities, That said, uncontextualized leaks of information with | 
-^ little direct relation to Canadian Es and authorities have challenged public 
ie cod R P i 
oi ee Use © ac) Thy : 
Ee á e “W Unaathortzed disclosures of classified information have spawned a global debate on 
=> privacy ‘and prompted {he spread of advaneed encryption throughout the Internet. Major. 
' Internet firms like Googke, Apple aad Facebook have now encrypted vast amounts of data he ; 
on the Internet, shrouding much of the activity of all their custémers. . 


a (U) For exsispk, with the release of its new —e system last full, Apple announced © 
orn - that Ita mew encryption features would prevent anyone, except the device's owner, from . à. 
‘ l being able to access the data stored on it. Not even Apple Itself would be able ta bypass a, eu. 
T voll ee user” s passcode, making it incapable of responding to warranted requests. 


-0 My fellow Director at the FBI in the United States, James Comey, has been quite 
. candid abont the challenge his and all our agencies face, describing this steady erosion of 


: | Mirain capabilities as “going dark.”. 
4) (U) The ghallenge of “going dark” is multi-faceted. Techmology continues to transf are 
À \<virtually every aspect of modern society, but it is doing so at a rate that has out i a ki, 
Er En. Etre _ ability for domestic laws and for investigative tools to adapt. Due to the complexity of 
“Ny D On, pei “modern techaolngy, there are technical barriers to accessing live communications and data 
“T $ as is stored on devices. These problems are further complicated by increasingly se secure | 
“Os “enesyptid software, and, in particular the rise of end-to-end user encryption. 


i y . ‘© Today, as s result ofthe borderless nature of cyberspace, these technical barriers a are. 
~ ` also being magnified ‘by legal and jurisdictional problems. 
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+ e (S) While encryption increases information a Ton also éwables the Intééèt-based Ac 
activity of malicious actors, whether criminal, terrdriityor x te à Haley penis t them fo 


evade the investigative techniques and network defenses. Sp; Ua Cons art l to; Su 
S À 


a i. TO To provide a pertinent example, following the attacks at the National War fes x 
s and Parliament Hill last — ae 


ne Fe 


"LE 7 : R ’ 
Py OF y > ; J 
aste ipnts and enterptises bave responded to widespread. <> 
et Prin and en Paa a eeoa vida LE: 


° ©) While I certainly understand why some would laud such developments, we a 
society truly think through the consequences of such technology. 


I would propose that we nes to find the right balance between ee 
| “dt and security. They should not we viewed as mutually exclusive. 
Pr. a 6) Fant said, I offer no simple policy in this regard, as these matters are ones for 
9/0 politicians and citizens to debate. I only wish for an informed debate that wili recognize t e 
: Carpal vk of “going dark.” As Director Comey recently stated, and I paraphrase, atwhat: - 
Te, À Rr E ‘cost vill we pee a nae fhat panant be cracked? 
Ve, ks V Ow “tome to these rapidly evolving technical challenges, 
Los Sy ASE" Oe, “Cp: Guvérament acts for good reasons in a deliberateand: . 
coid ing has g obligation to consult industries, such as those you represent 


| | “here today. CEs App Shanta 
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(S) That said, such governance structures will be challenged to keep pace with the rapid | 


changes in technology. New commu i techpojogies are invented regularly aed grow 
@ in popularity, sometimes within monty Co SE à NEO R 4 Cy 7 He 
| Be 70 AC 
e (S) Ladies and gentlemen, E Es A ER Ti ty Tony TAND 
; os Ve “ae AC7 Op 
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_ © (U) In addition to these technical concerns, cyberspace is still very much the Wild West — 
international law has simply not caught up to all the issues involved. There are not yet 
`. ‚comparable and established laws for cyberspace which are recognized and widely adhered 
- to. This leaves both Governments and the private sector little choice but to manage risks. 


o . © (U) The chaotic and often anonymous nature of the internet has allowed these actors to 
i flout the rules that have largely buttressed international systems of global trade and 
respect for intellectual property. Au even greater level of anonymity through virtually 
impregaable encryption would represent great risk to both commerce and national 
security. The natioual security community and our friends in law enforcement will | 
continue to do our part i countering this threat and criminality, but, I would stress again 
“the cooperation required to eusuré our mutual security. AC7 i 


° wv) Changing the cost/benefit calculations for these actors who engage in such activities is a 
i joint responsibility and will help maintain trust in systems of global governance and 
commerce. Such common rules are the bedrock to global finnnee and trade. Without such | 
rules and regulatory certainty, businesses such as yours cannot thrive, trade would suffer, 


and the Canadian economy would not progress. 


& e (U) With that I will conclude, and, I look forward to your questions. 
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Thik document is for thie iriformation ot the: Deputy Ministers" Operations Committee members and for Deputy. 
| lack, The information and intelligence contained herein must not be disclosed, used as part ofan investigation or 
consultation with the Ca Canadian Secunty intelligence Service. 


{Le présent document est transmis à titre indicatif aux membres du Comité des sous ministres chargés de la coordination des opérations et au Sous- 
Ministre Patrimoine Canacien, Graharn Flack Les informations et renseignements qu'il conbent ne doivent être n communiqués nj utilisés dans le 
© cadre d'une enquête ou comme élément de preuve sans consultation préalable du te canadien du renseignement de sécurité 


RUSSIAN CYBER-ACTORS CONTINUE TO TARGET CANADIANS AND 
a NE Gens ENTITIES 


Ay 1O) 
On February 7, 2018, two days before'theystact” Gr Pyeongchang Winter Olympic Games, the Russian military 
‘intelligence (GRU)-attributed Fancy Bete LS T) claimed to leak files from the Canadian non- 
profit Own the Podium, one Lies me medal performances of Canadian Olympic ` 
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The aforementioned activities targeting Canadians Cr surge of GRU cyber- 
operations against other Olympic- -related targets. tay N a 


gion F iisen US intelligence officials revealed that GRU hackers 
N Dany umes cet in South Korea and attempted to cover up their tracks by 
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This document is for the information of the following only: / Le présent document est transmis uniquement aux persons tap 
- Minister of Public Safety, National Security and Intelligence Advisor Mr. Daniel Jean. Deputy Minister of Public Safety Canada Mr. Malcom Brown, 


Communications Security Establishment Chief Ms. Bossenmaier, Deputy Minister of Global Affairs Canada Mr lan Shugart, and Assistant 
Secretary = Secunty and Intelligence Ms. Caroline Xawer . 


POISONING OF FORMER RUSSIAN MILITARY INTELLIGENCE OFFICER 


A 


Background | "Fay, 


This assessment is based on informati om as EMA 12,2 2018; 

On March 5, 2018; media reported tres oièrRpssiah/military intelligence (GRU) officer Sergey Skripal, 
along with his daughter, on * critical | condition’ alter -cofifing, int pontact with an unidentified substance. They 
were both found unconScidus £ ed igo outside a shopping fëhtpe in em United Kingdom (UK). There 
are conflicting reports as to VAL éther thee ims Sere. nes (ean an.the s sh op Ring centre or at Sergey Skripal’s home 
nearby. On March 7, 2018, UK authoriti Houinced tliat. Skripal was! del crately ; poisoned with a nerve agent in 
a case that police are now treating as attempte murder Fhe following day, UK ees announced that 21 
other people (including one police officer) have beef freated] foc-expaguse telated to this incident. The two 
primary victims remain in critical but stable condition, and the sesporiding Police officer in serious but responsive 
condition. On March 9, 2018, approximately 180 specially trained” tehops ère Aeployed i in the area with large 
scale decontamination and detection equipment to deal with the cont: SUK authorities indicate that 
scientists have identified the toxin used but they are not disclosing the identity to the public at this time. It is 
speculated in media reporting that the identity of the substance may be classified. 


Sergey Viktorovich Skripal was arrested in Russia in 2006, and later convicted of providing the British Secret 
Intelligence Service (BSIS/MI6) with the identities of Russian Intelligence Services (RIS) agents working 
undercover in Europe. In July 2010, Skripal was one of four prisoners released by Moscow in exchange for ten 
Russian Foreign Intelligence Service (SVR) Illegals arrested nié the Federal Bureau of Investigation (FBI) in June 
2010. Skripal was later flown to the UK. 


Intelligence Assessment Branch . 
Direction de l'évaluation du renseignement 


31031409) | 


& D 8/18 | CSS National Security , Rapport spécal du SCRS ee à a 
% March 12, 2018 Special Brief enjeux de sécurité na VUE 
© Des “ASE. UN, . 


7, + s AY Va ER The 


| Rapp -spéeial qu SCRS :: 


(SIS National sary,» ' a 
| ron dela write nationale 


peau Bree 


@ CNSSB 9/18 ; | 
| ® March 13, 2018 
Lips ' S 
This document is for the information ofthe follovang only: f Le présent document est transmis DH auk ap as ye 
“7 National Security and inteligence Advisor Me Deniel-Jean, Deputy Minister of Public Safety Canaca Mr, Malcom Brown, nn 
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This assessment is based on infogas o 5 15, 2018. 
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On March 12, 2018, UK Prime «se ing May, pay: ide tified the nerve agent used in the 
Salisbury attack as a Russian military grade QN h } applied ifr dit “untévful use of force”. The Russian 
Federation (RF) has denied involvement in this Wages fefdsed to respond to the UK government’s 
ultimatum to provide an explanation by midnight o Xi PINNIS; Tttesponse, on March 14, 2018, the UK 
PM announced in Parliament a series. si initial measures sire ste include: 
Au 

Expelling 23 RF diplomats om the UK (they have been given à Blé à leave); 

Increasing checks on RF-based private flights, customs and freight, 

Freezing Russian state assets where there is evidence they may be used to threaten the life or property of 

UK nationals or residents; 

‘Ministers and the Royal Family will — the FIFA World Cup in Russia, June — July 2018; 
°. Suspending all planned high-level bilateral contacts between the UK and — 


Plans to =i li new laws to increase defences against “hostile state activity”. 


Pollok URP, 
` expulsions. 
Sa to dieu: 


s announcement, RF officials declared that Russia would respond in kind to tle 
oo RF President Vladimir Putin chaired a meeting of the RF National Security 
ate the Le decision to expel 23 Russian diplomats. RF Foreign Minister 
RS ae a soon”. According to the Russian news agency TASS, President Putin 
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a orem rs Ng en se Moscow takes against the UK. 
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CSIS Contributes to Public Attribution of GRU Cyber-Activities 


2018 10 04 È Roy 


On October 4, 2018, the Goveshneriicn ee thenited Kingdom (UK) and the Netherlands released 
‘public statements expobiggand ne erations asied out by officers of Russia’s Main Intelligence 
Directorate (GRU) agaia inte propos epsganizations throu the Ayorld. Other nations are expected to follow 
with their own supporting site OR dan e day, theng Maes NU Federal Bureau of Investigation (FBI) 
issued criminal indictments GS fe “ere: involved í in Rs yber-activities. Collectively, these 
statements call attention to the GRU’s a inst th e Mon a Todd Anti-Doping Agency 
(WADA), the Organisation for the Prohibiti ER) apas (OPCW), and the Canadian Centre for 
Ethics in Sports i among others. pa 

“i “nee & ason 


nr 
This coordinated initiative is intended to send a ee Rima message to the Russian 
government that its actions are unacceptable to the international community. 


The mention of the OPCW in multiple statements is primarily a result of the Dutch expulsion of four GRU 
officers caught in the midst of conducting ii enabled, cyber-operations against the OPCW in 
The Hague on April 13, 2018. ; : i 


: | intelligence Assessment Branch . 
LE Direction de l'évaluation du renseignement 


® CNSSB 27/18 | CSS National Security , Rapport s ddaldu ASE 
® October 4, 2018 Special Brief enjeux e sécurité natic 
Ey... En o, ae DER iz, 


Intelligence Assessment Branch 
. Direction de l'évaluation du renseignement 


